NuytsTech Security

CVE-2024-54160

by ·

dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer.

More information : https://github.com/Jflye/CVE-2024-54160–Opensearch-HTML-Injection

Tags: